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[57] ABSTRACT 

A digital longitudinal Aircraft Propulsion Control (APC) 
system of a multiengine aircraft is provided by engine thrust 
modulation in response to comparing an input flightpath 
angle signal yc from a pilot thumbwheel or an ILS system 
with a sensed flightpath angle y to produce an error signal yt 
that is then integrated (with reasonable limits) to generate a 
drift correction signal to be added to the error signal ye after 
first subtracting a lowpass filtered velocity signal Vel^ for 
phugoid damping. The output error signal is multiplied by a 
constant to produce an aircraft thrust control signal ATC of 
suitable amplitude to drive a throttle servo for all engines, 
each of which includes its own full -authority digital engine 
control (FADEC) computer. An alternative APC system 
omits sensed flightpath angle feedback and instead controls 
the flightpath angle by feedback of the lowpass filtered 
velocity signal Ve^ which also inherently provides phugoid 
damping. The feature of drift compensation is retained. 

9 Claims, 2 Drawing Sheets 
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EMERGENCY CONTROL AIRCRAFT 
SYSTEM USING THRUST MODULATION 

ORIGIN OF INVENTION 

The invention disclosed herein was made by employees of 
the United States Government and may be manufactured and 
used by or for the Government for governmental purposes 
without the payment of any royalties therefor. 

TECHNICAL FIELD 

The invention relates to an emergency control aircraft 
system that uses autothrottle thrust modulation for control of 
an aircraft in the event of a primary flight control system 
failure. 

BACKGROUND ART 

Aircraft flight control systems are designed with extensive 
redundancy' to ensure a low probability of failure. During 
recent years, how ever, several airplanes have experienced a 
major flight control system failure leaving engine thrust as 
the only mode of flight control. In some of these emergency 
situations, engine thrust was modulated by the pilot to 
maintain control only of the flightpath angle y, but in other 
situations lateral control was also required. In the majority 
of the cases surveyed, crashes resulted and over 1.200 
people died. 

Thus, the challenge was to create a sufficient degree of 
thrust modulation control by the Flight Control Computer 
(FCC) to safely fly and land an airplane using an Instrument 
Landing System (ILS). Meeting this challenge was the 
objective of a program to develop a Propulsion-Controlled 
Aircraft (PCA) emergency backup system. The proposed 
PCA system required that the aircraft have at least two 
engines, one on each wing, and that the normal control 
surfaces not be locked in a hardover position which could 
exceed the moments that could be created from the con- 
trolled thrust of the engines. 

The results of analytical studies and flight tests show that 
control can be obtained by autocontrol of the engine throttles 
through the FCC. However, making a safe runway landing 
is exceedingly difficult because of low phugoid damping and 
high pilot work load near the ground. The problem has been 
to not only improve emergency control performance but also 
reduce pilot work load using a PCA system. The end goal 
was to make landing as well as climbing, cruising at altitude, 
and descending a viable task by using the PCA system with 
minimal or no previous pilot training required. 

In the recent past, a propulsion controlled system has been 
developed and disclosed in U.S. Pat. No. 5330.13 1 by Frank 
W. Burcham et al. (incorporated herein by this reference) 
based upon a program modification of an otherwise normal 
FCC that, in the event of a failure of the normal flight control 
system of a multiengine airplane, substitutes normal pitch 
axis control with symmetric control of the engines through 
their FCC driven servos using pitch attitude and pitch rate 
sensed by gyros to provide the feedback signals necessary to 
track a pitch command signal. That patented flight control 
system requires modification not only of the FCC but also of 60 
each full-authority digital engine control (FADEC) com- 
puter for each engine. An objective of this invention is to 
provide a longitudinal emergency backup system for a PCA 
that requires only program modification of the FCC without 
any changes in the separate FADEC computers of the 65 
engines based upon tracking a flightpath angle command 
(yc) from a pilot thumbwheel, an Instrument Landing Sys- 
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tern (ILS). or the like, using a feedback signal from a 
flightpath angle sensor, or its reasonably equivalent altitude 
if there is not available on the aircraft a flightpath angle 
signal source aided by a feedback signal from a velocity 
5 sensor or. in a less complex method with some loss in 
performance, using only the sensed velocity signal. 

STATEMENT OF THE INVENTION 

In accordance with the present invention, longitudinal 
io control of a multiengine aircraft is provided in response to 
a flightpath angle command, yc, produced by a pilot- 
operated thumbwheel, instrument landing system, or the 
like, and compared to a sensed flightpath angle, y. scaled by 
a constant, Kgma. to render the feedback signal proportional 
15 to the command signal. The comparison produces an error 
signal, ye, which is in turn scaled by a constant Ke before 
subtracting a sensed velocity signal. Vel. after lowpass 
filtering and scaling it by a constant Kvel to render the 
velocity feedback signal proportional to the scaled flightpath 
20 error signal. This subtraction of the scaled and lowpass 
filtered velocity feedback signal produces a phugoid- 
damped y error signal. The undamped y error signal is 
integrated and scaled by a constant Kvi to produce a drift 
correction signal for addition to the phugoid damped error 
25 signal, which after scaling by a constant Kve. produces an 
engine servo control signal that is then used to control the 
engine through a cockpit throttle servo that is part of a flight 
control computer. All of these functions involved in produc- 
ing a servo control signal from the flightpath angle com- 
30 mand and the feedback signals (y and Vel) are programmed 
into a cockpit flight control computer, including the scaling 
of the servo control signal in order for it to be compatible 
with the servo requirements. Typically there is but one 
throttle servo controlling all engines of a multiengine 
35 airplane, but in the event there is a separate servo for each 
engine, the same control signal is applied to each servo. 

For a less complex longitudinal control system, only the 
velocity feedback signal is used for comparison with the 
flightpath angle command, yc. In this case, the command 
40 signal is scaled by a constant Kf for it to be proportional to 
the lowpass filtered signal Vel scaled by the constant Kvel. 
The error signal produced by this comparison is thus a 
phugoid damped flightpath angle error signal. That error 
signal is then integrated and scaled by the constant Kvi for 
45 addition to the phugoid damped error signal for drift cor- 
rection. This single velocity feedback correction will pro- 
vide for flightpath angle control because, as the actual 
aircraft flightpath angle increases or decreases from the 
commanded angle, the aircraft velocity will decrease or 
so increase, respectively. Correction may be slower with only 
this velocity feedback, but it does have the redeeming 
feature of providing phugoid damping. 

The novel features that are considered characteristic of 
this invention are set forth with particularity in the appended 
55 claims. The invention will best be understood from the 
following description when read in connection with the 
accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a functional block diagram of a PCA system 
which is the subject of the present invention to be imple- 
mented by programming the system into the FCC of the 
aircraft using both sensed flightpath angle, y. and sensed 
velocity. Vel. feedback signals. 

FIG. 2 is a functional block diagram of a modified PCA 
system using only the feedback signal Vel from a velocity 
sensor 
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RGS. 3A-3H present a time history of a PCA control of 
tlightpath angle, y. in response to a step change in the 
commanded tlightpath angle, yc. and recorded dynamic 
changes in velocity, pitch attitude rate, engine thrust, and 
altitude. 

DETAILED DESCRIFTION OF THE 
INVENTION 

The test vehicle for the invention to be described in detail 
was the MD-i 1 wide-body transport which has a mechanical 
flight control system with hydraulically powered actuators. 
The MD-11 airplane is equipped with a Flight Control 
Computer (FCC) which provides a Flight Management 
System (FMS) that integrates autopilot, navigation, and 
autoland functions. The autopilot control includes a thum- 
bwheel for commanding flightpath angle. during all 
phases of flight, namely climbing, cruising and descending. 

The hydraulic power for control of all aircraft flight 
effectors is provided by three independent systems, each 
designed for fail-safe capability, i.e.. for not failing in a 
hardover position. Essential flight control functions may be 
maintained by any one of these three independent systems. 
Pitch control is provided by dual elevators, one on each 
horizontal stabilizer, and pitch trim is provided by a movable 
horizontal stabilizer. Inboard and outboard ailerons supple- 
mented by wing spoilers provide roll control. A dual rudder 
mounted on a single vertical stabilizer provides yaw control. 
Flaps are extended rearwardly and downwardly to increase 
wing resistance when required. Lateral dynamics of the 
aircraft is controlled by a yaw damper integrated as part of 
the FMS. and longitudinal stability augmentation is pro- 
vided by the FMS through pitch dynamics. All of the lateral 
and pitch dynamic surfaces are controlled by hydraulic 
actuators. 

The three engines that power the MD-11 aircraft are Pratt 
& Whitney (PW4460) high-pass ratio turbofan jet engines in 
the 60.000 lb. thrust class. Two of the engines are mounted 
in underwing pods below the center of gravity (c.g.) of the 
aircraft, one on each wing, and the third engine is located at 
the base of the vertical stabilizer above the c.g. The wing 
engines are 121 inches below the nominal c.g., and the tail 
engine is 240 inches above the nominal c.g. with its thrust 
axis inclined 2.5° down (nozzle pointing down). Each 
engine is provided with its own Full-Authority Digital 
Engine Control (FADEC) computer driven by the FCC. 

As is typical for high-bypass turbofans, thrust response is 
initially very slow. Once thrust levels are above 20%. the 
engine response improves dramatically. An ‘ approach idle” 
setting (when the flaps are extended beyond 27°) maintains 
the idle revolutions per minute (RPM) at a sufficiently high 
level that 8 second response from idle to full-power require- 
ment can be met. A “cruise idle” or “minimum idle” setting 
can require as much as 12 seconds to go from idle to full 
power. If the PCA were engaged with “minimum idle,” a 
pilot-induced oscillation (PIO) could occur because of large 
time lags. For this reason, the FCC is programmed to set the 
FADEC system to “approach idle” when the emergency 
PCA is engaged by the pilot once a failure of the normal 
flight control occurs. 

Pitch effects occur because of thrust changes in the wing 
engines located below the c.g. and slightly tilted up. This 
arrangement is typical of the majority of wing-engine air- 
craft. Assuming that the aircraft were initially trimmed in 
level flight, an increase in thrust would cause a change in 
flightpath angle caused by the vertical component of thrust, 
a moment resulting from the horizontal thrust component 
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because of the c.g. offset, and a trim speed stability change. 
If an engine were mounted above the c.g.. as is the case with 
the MD-11 tail engine, an increase in thrust would cause a 
pitch down moment until the trim speed overcomes the 
5 nosedown dynamics. Other effects, such as ram drag and 
engine inlet location, are other important considerations in 
the aircraft dynamics. 

PCA Control System Design 

All large civil transports have at least two engines; 
10 therefore, the design philosophy was to make the PCA 
longitudinal control program for the MD-11 generally appli- 
cable not only to work primarily with the two wing engines 
but also to include the third engine as though it were an 
additional pair of wing engines so that if a civil transport has 
15 more engines, the aircraft could take advantage of this PCA 
control system. If all the aircraft engines do not lie on the 
same horizontal plane, pitching moment and velocity (Vel) 
changes can be compensated independently. The MD-1 1 test 
aircraft falls into this category since it has a center engine 
20 above the c.g. the thrust of which can be used directly for 
trim speed and dynamic control of flightpath angle. Lateral 
control may be effected by differential control of the two 
wing engines while longitudinal control is taking place, but 
the present invention relates only to the problem of longi- 
25 tudinal propulsion control. 

The longitudinal control laws developed assume not only 
that the normal control surfaces are not functioning but also 
are not in a hardover position. The PCA uses engine thrust 
modulation of all three engines driven by a closed-loop 
30 controller programmed into FCC of the PCA to increase bare 
airframe phugoid damping and thus allow the pilot to land 
safely by controlling flightpath angle y. 

Symmetric or collective throttle inputs are used for lon- 
35 gitudinal control. Symmetrical thrust changes cause an 
initial change not only in velocity but also in pitch and pitch 
rate, depending on the relative location of the thrust line and 
the aircraft center of gravity at the moment of thrust change. 
It would therefore be desirable to monitor pitch and pitch 
^ rate and to so integrate them into the autothrottle control 
command (ATC) so as to minimize phugoid oscillations. 
However, the present invention integrates only sensed veloc- 
ity in the longitudinal control laws that produces the ATC. 

Classical methods were initially used to provide a linear 
45 design of longitudinal control using simulators with reason- 
able first cut results. Later in the flight-test phase, nonlinear 
time domain methods were employed for rapid setting of 
sealing constants. The nonlinear simulators were also used 
to adjust the initial scaling constants determined from the 
5 Q linear design. The PCA system was designed with the 
flexibility to change the control gain in flight by using an 
existing Multifunction Control and Display Unit (MCDU) 
that provides the pilot with “dial-a-gain” options for the 
PCA. 

55 Pilot Vehicle Interface 

The Flight Control Panel (FCP) is used for the pilot to set 
the flight path angle yc for the PCA control. A flightpath 
angle error signal is produced by subtracting sensed flight- 
path angle and also subtracting from the error aircraft 
60 velocity in the FCC for phugoid oscillation damping. The 
pilot could also engage the Instrument Landing System 
(ILS) and set the PCA-system with a preselected mode to 
control flightpath angle during an ILS approach by pushing 
an approach/land button on the FCP. but another mode of 
65 velocity' feedback only (described below) could also be 
selected through the MCDU depending upon the maneuver 
the aircraft is engaged in at the time of normal major aircraft 
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control failure. When any PCA selected mode is engaged, 
the "approach idle" engine setting is automatically set to 
achieve faster engine thrust response to PCA commands, 
thus avoiding any possible PCA induced oscillation. 

Longitudinal Control of FLightpath Angie 

Longitudinal control uses symmetric thrust commands 
simultaneously directed to all engines through a cockpit 
throttle servo to control the flightpath angle y. Although the 
control law was developed primarily to control the flightpath 
angle for a landing approach, it may also be used to control 
the flightpath angle for up-and-away as well as level cruise 
control in response to flightpath angle and velocity com- 
mands entered in the cockpit by the pilot, the TLS , or other 
system. 

Referring to FIG. 1. the functional block diagram for the 
control law in the S-plane to be described below comprises: 
three summing (I) functions 1,2. and 3; an integrating (1/S) 
function 4: a cockpit throttle servo 5 that serves to control all 
three MD-11 engines via a multiengine control system 6; 
aircraft dynamics sensors 7; a lowpass Alter 8: a flight path 
angle command yc source 9 which may be a pilot thumb- 
wheel or an ILS system: and five scaling (proportioning) 
constants 11-15 that function like signal amplifiers set with 
constant gain values but actually implemented in a digital 
computer program as a multiplier. The feedback signals in 
the PCA system are sensed flightpath angle y for tracking 
and air velocity Vel for phugoid damping. A flightpath angle 
error signal ye is produced by comparing the pilot input 
value yc with the feedback signal of sensed flightpath angle 
y scaled by a constant Kgma and a velocity feedback signal 
Velf is produced by lowpass filtering the sensed velocity 
signal Vel. Both the flightpath error signal ye and the filtered 
velocity signal Vel^ are proportioned by separately and 
empirically determined constants Ke and KveL The propor- 
tioned flightpath error signal Ke*ye is compared to the 
proportioned velocity feedback signal KvePVel^ and the 
difference is scaled by a constant Kve to produce an error 
signal that is the difference between the two proportioned 
feedback signals. The proportioned error signal Ke*ye is 
processed through a limited integrator 4 to produce an 
integral of flightpath angle error which is added to the 
proportioned error signal to produce an aircraft throttle 
command signal that is multiplied by a scaling constant Ksc 
to meet the input signal amplitude requirements of the 
cockpit throttle servo 5. 

The control law in the S-plane for maintaining a pilot 
commanded flight angle y is as follows: 

ATC- Ksc{ K 'vi/S *ye*Ke+(yf*Ke-B)Kve) (l) 

where: Ksc is a constant for proportioning the control 
output signal to the cockpit throttle servo; 

ye=yc-y. and y is the sensed flighpath angle scaled by a 
constant Kgma to be proportional to the command 
input yc in volts per degree; 

B=Kvel*Vel / , and Ve^ is sensed velocity Vel lowpass 
filtered in block 8; 

Ke and Kve are scaling constants; 

Kvi is a scaling constant for the integral yeKe/S; and 

ATC is the engine thrust control output to throttle servo 5 
that controls all engines. 

The constant gains for the MD-11 are: 

Kve= 13.45 
Kvi=0.952 
Kvel=0.21 


Kgma=1.03 

The engine thrust control output command ATC is applied to 
the throttle servo 5 of all engines. 

An alternative implementation of the control law defined 

5 by Equations (1) using only a velocity feedback signal Vel 
to control the flightpath angle y is shown in FIG. 2. The 
sensed velocity Vel is processed as before, but with the 
constant Kvel equal to 0.15 instead of 0.21 and other 
constants are set differently. The control law in the S plane 
is as follows: 

ATC=Ksc*ye(Kvi/S+Kve) (2) 

where: ye=yc-B. 

15 Ksc and B are as defined above for Equation (1); ATC«= 
Kfyc — 

The constant gains for this embodiment of the PCA are: 
Kf=0.2x2.5 
Ke=5 

„ Ksc=1000 

Kvel=0. 15 

Operation of the embodiment of FIG. 2 is the same as that 
of FIG. I except for the elimination of a y-feedback and the 
different values for the constants Kf in place of Ke. as 
represented by the functional blocks 14 and 11. respectively. 

25 and the different values for the same constants Kvi. Kve. 
Ksc, and Kvel. as represented by the functional blocks 22, 
23. 24. and 25 employed to scale the signal values in 
proportion with other values to reach the scale needed for the 
output signal ATC. 

30 FIG. 3 shows a simulation time history of a PCA control 
of all three MD-11 aircraft engines in response to a 1° 
flightpath angle command using the control law of Equation 
(1). These data indicate that it took 20 seconds to reach the 
commanded input of 1°. This speed is slower than with only 

35 the wing engines, because the middle engine is producing a 
nosedown moment since it is above the c.g., while the wing 
engines below the c.g. are producing a nose-up moment. 
Velocity increased approximately 2.5 kn then settled back to 
almost the initial speed with a pitch attitude rate of 0.1 

40 deg/sec. The change in thrust levels for the left and tail 
engines are presented for the simulation engine activity. The 
change in the altitude trace shows constant climb for the 1° 
flightpath angle command. This control law was not flight 
tested but is presented because of the very simple nature of 

45 the design and implementation. Based on linear simulation 
results, this control law could be used to safely land the 
airplane while the pilot manually provides differential 
throttle inputs for lateral/directional control in the absence of 
any other provisions. 

5 Q Although particular embodiments of the invention have 
been described and illustrated herein, it is recognized that 
modifications may readily occur to those skilled in the art. 
Consequently, it is intended that the claims be interpreted to 
cover such modifications and equivalents thereof. 

55 What is claimed is: 

1. An emergency control servo system for using thrust 
modulation for longitudinal control of a multiengine aircraft 
having a throttle servo for control of all engines in unison, 
comprising 

60 means for independently entering a flightpath angle com- 
mand to be maintained and producing a flightpath angle 
command signal yc. 

means for continually sensing said aircraft flightpath 
angle and producing a flightpath angle signal y. 

65 means for producing a flightpath error signal ye as a 
fiction of the difference between said flightpath angle 
command yc and said sensed aircraft flightpath angle y. 
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means for forming a limited integral as a function of said having aircraft dynamic sensors of flight angle y and aircraft 

error signal and velocity Vel. a flight control computer and a single throttle 

means for adding said integral to said error signal for servo for control of all engines in unison and having means 

producing an output control signal for said throttle for both independently entering a flightpath angle command 


servo, thereby to adjust thrust of said engines to reduce 
said error signal ye toward zero. 

2. An emergency control servo system as defined in claim 
1 wherein all of said means function to produce digital 
signals for digital operation of means receiving said digital 
signals. 

3. An emergency control servo system as defined in claim 
1 further comprising means for sensing aircraft longitudinal 
velocity’ to produce a velocity’ signal. 

means for lowpass filtering and scaling said velocity 
signal to produce a filtered signal and 

means for subtracting said filtered velocity signal from 
said flightpath error signal ye, thereby damping any 
phugoid oscillation of said flightpath error ye. 

4. An emergency control servo system as defined in claim 
3 wherein all of said means function to produce digital 
signals for digital operation of means receiving said digital 
signals. 

5. An emergency control servo system for using thrust 
modulation for longitudinal control of a multiengine aircraft 
having a throttle servo for control of all engines in unison, 
comprising 

means for independently entering a flightpath angle com- 
mand to be maintained and producing a flightpath angle 
command signal yc. 

means for sensing aircraft longitudinal velocity and pro- 
ducing a lowpass filtered velocity signal. 

means for subtracting said lowpass filtered velocity signal 
from said flightpath command signal yc to produce a 
flightpath error signal ye. 

means for forming a limited integral as a function of said 
error signal and 

means for adding said limited integral to said flightpath 
error signal ye for producing an output control signal 
ATC to said throttle servo, thereby to adjust thrust of 
said engines to reduce said flightpath error signal ye 
toward zero. 

6. An emergency control system of claim 5 wherein said 
control law is implemented in digital form. 

7. An emergency control system of claim 5 wherein said 
control law is implemented in digital form. 

8. An emergency control system for using thrust modu- 
lation for longitudinal control of a multiengine aircraft 


5 to be maintained and producing a flightpath angle command 
signal yc said emergency system comprising a closed loop 
servo system for producing a throttle command signal ATC 
for said throttle servo in accordance with the following 

control law in the S-plane: 
to 

ATC=Ksc(Kvi/S*ye *KeHye *Kr-B)Kve) 

15 where: Ksc is a constant for proportioning said control 
output signal of said closed loop servo system to said 
throttle servo; 

ye=yc-y. and y is the sensed flightpath angle scaled by a 
constant Kgma to be proportional to the command 
input yc in volts per degree; 

B=Kvel*Vei r and Vel, equals Vel*50/(S+50). 

Ke and Kve are scaling constants; 

Kvi is a scaling constant for the integral yeKe/S. 

25 9. An emergency control system for using thrust modu- 

lation for longitudinal control of all engines in unison and a 
flight control computer and a single throttle servo for control 
of all engines in unison, means for sensing aircraft velocity 
and producing a signal Vel proportionate thereto, and further 
30 having means for both independently entering a flightpath 
angle command to be maintained and producing a flightpath 
angle signal yc, and said emergency control system com- 
prising a closed loop servo system producing a throttle 
command signal ATC for said single servo, a throttle com- 
35 mand ATC for all engines as a function of velocity feedback 
in accordance with the following control law in the S-plane: 


A TC-Ksc { Kvi/S+Kve ) 

40 

where: ye=yc-B, 

B=Kvel*Vel,. 

Vel / =50/(S+50)*Ve, 

45 Ksc is a scaling constant, and 
Kvi is a scaling constant. 

* * 
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